bf1942/bf1942.te

   1 policy_module(bf1942, 0.1.5)
   2
   3 # File context for the executable process
   4 type bf1942_t;
   5 type bf1942_exec_t;
   6
   7 type bf1942_rw_t;
   8 files_type(bf1942_rw_t)
   9
  10 type bf1942_ro_t;
  11 files_type(bf1942_ro_t)
  12
  13 init_daemon_domain(bf1942_t, bf1942_exec_t)
  14
  15 corenet_udp_sendrecv_generic_port(bf1942_t)
  16 corenet_udp_bind_generic_port(bf1942_t)
  17 corenet_udp_bind_generic_node(bf1942_t)
  18
  19 read_files_pattern(bf1942_t, bf1942_ro_t, bf1942_ro_t)
  20 read_lnk_files_pattern(bf1942_t, bf1942_ro_t, bf1942_ro_t)
  21 list_dirs_pattern(bf1942_t, bf1942_ro_t, bf1942_ro_t)
  22
  23 manage_files_pattern(bf1942_t, bf1942_rw_t, bf1942_rw_t)
  24 manage_dirs_pattern(bf1942_t, bf1942_rw_t, bf1942_rw_t)
  25 setattr_files_pattern(bf1942_t, bf1942_rw_t, bf1942_rw_t)
  26
  27 sysnet_dns_name_resolve(bf1942_t)
  28
  29 kernel_read_system_state(bf1942_t)
  30 allow bf1942_t self:process execmem;
  31
  32 # The BF1942 binary executes itself
  33 allow bf1942_t bf1942_exec_t:file execute_no_trans;